Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: GXj2Aauhp5p31P5rAeh7ouExBPBXHzzPXgK98XDm6dA=
Subject key identifier: B6:CD:79:FC:66:D7:70:34:22:2C:6C:B7:8B:8D:97:0C:F6:FD:2E:1B
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 01988EED228A8D6C36EBF6C164551D49D841
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0A8A
Signing time: Sat 09 Aug 2025 13:02:42 +0000
Manifest this update: Sat 09 Aug 2025 13:02:42 +0000
Manifest next update: Sun 10 Aug 2025 13:02:42 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: yJgBI0OJbgKZIl9ASs1R61H2t25CkLCorhUwr5faJ2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ed:22:8a:8d:6c:36:eb:f6:c1:64:55:1d:49:d8:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Aug 9 13:02:42 2025 GMT
Not After : Aug 10 13:02:42 2025 GMT
Subject: CN=b6cd79fc66d77034222c6cb78b8d970cf6fd2e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:be:cd:35:c1:de:63:c3:e8:60:03:c3:ac:
11:83:7a:83:f4:69:38:09:a5:15:fd:2a:cb:12:c0:
96:a2:be:75:b3:21:51:50:6a:c3:67:fe:fb:90:14:
9d:b2:13:ed:9a:65:1f:e9:f6:39:26:3a:07:74:f0:
1d:2b:ff:8c:bb:54:7f:95:52:ee:28:d5:09:c8:e5:
0a:ed:67:62:db:10:18:da:dd:ea:d8:eb:67:1a:7f:
a2:70:be:e8:69:90:f0:7f:1e:d4:f8:cd:f1:b5:fc:
0b:01:43:25:36:5d:8b:24:ec:65:e0:d0:10:99:01:
07:41:23:8c:c1:a7:57:a0:04:9f:03:de:80:43:3f:
c9:f0:98:da:5d:5a:f9:6d:28:27:e0:98:3f:7e:7c:
c5:6f:a4:5d:52:9b:04:c1:3b:e3:fe:df:61:1f:50:
b7:4e:0a:f9:21:fc:63:c7:40:06:f4:48:80:b0:5c:
99:27:1b:fb:d4:be:02:a3:1f:a7:c5:f8:6c:b4:0e:
94:c2:2a:9d:90:62:df:b2:d9:cb:12:05:fb:ee:e1:
d5:cf:ce:0f:6e:b1:93:ab:49:13:5c:68:4d:fd:af:
8f:e2:86:9a:0d:c3:63:b4:9e:56:be:3e:e0:c3:6c:
c5:ef:c1:cd:c2:ef:07:e2:7c:4b:44:46:56:6a:a1:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CD:79:FC:66:D7:70:34:22:2C:6C:B7:8B:8D:97:0C:F6:FD:2E:1B
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:14:e2:fc:cc:4f:60:26:e0:78:8c:46:57:d8:d2:f2:cc:
b6:c1:11:70:75:4e:f0:5d:76:8e:94:79:04:41:d1:ef:93:ed:
38:53:1e:81:de:77:85:a3:d3:58:74:6a:55:94:fd:3b:fa:0b:
c2:57:dc:00:b9:b1:64:fa:fb:88:4b:5c:56:90:46:16:6a:bd:
6e:6e:3b:36:7f:7e:10:96:6b:41:ea:b6:c8:ee:67:78:00:02:
ec:bd:81:b6:81:78:49:da:4b:6c:c8:98:b2:cc:9d:4e:08:16:
a0:0d:b4:60:b2:c6:a2:f1:64:33:25:92:33:79:bf:63:c9:9d:
1d:69:d1:47:2f:af:dd:13:67:2b:17:85:07:37:c0:13:cb:6e:
a1:dc:8e:e1:cf:59:71:fb:63:5e:17:fc:d2:bf:e5:d9:21:dc:
14:27:ac:5c:07:42:0b:a1:f4:e6:0a:3e:ee:c2:57:52:b0:43:
2c:d8:5e:a0:dc:f4:d0:17:3b:6d:a1:13:41:9e:41:8b:3e:d7:
b1:79:1c:42:bd:cb:e5:56:7b:22:60:e6:8c:c6:f4:31:2a:8e:
97:ca:3e:3f:58:c1:1c:b6:d4:a5:95:2b:6a:fa:f2:46:62:00:
a8:65:ac:10:e0:03:87:42:83:c6:b0:44:7d:7a:df:2d:28:0f:
d5:68:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:26 2025 by rpki-client